[java-sig-commits] [Bug 1942554] New: CVE-2021-21344 XStream: arbitrary code execution via crafted input stream